· CORE DISCIPLINE
GMP
Good Manufacturing Practice
Manufacturing, sterile/aseptic processing, contamination control, and product quality.
What this page does not claim
Educational orientation — not a determination of regulatory applicability, compliance, validation scope, or organizational approval.
WHAT IT GOVERNS
Good Manufacturing Practice governs how medicinal products are made and controlled — facilities and equipment, materials, production and packaging, quality control, and the records that prove it — so that every batch is manufactured to consistent, defined quality regardless of who is on shift. It is the baseline body of requirements (21 CFR 210/211, EU GMP, WHO, PIC/S) that regulators inspect against.
WHY IT MATTERS
GMP failures are behind a large share of recalls and inspectional observations. A single uncontrolled step — a cross-contamination event, an unvalidated process, an unreviewed batch record — can adulterate an entire batch and reach patients before anyone notices. GMP is where quality is either built into the product or lost, and it is the standard every downstream discipline assumes is in place.
KEY FOCUS AREAS
01
Contamination control & aseptic processing
Sterile and aseptic operations under a formal Contamination Control Strategy — environmental monitoring, gowning, media fills, and the barrier and cleanroom design that keeps product sterile (EU GMP Annex 1).
02
Process validation & control
The lifecycle approach to validation — process design, qualification, and continued process verification — so the process is proven capable and stays in a state of control, not just qualified once.
03
Documentation & batch record review
Written procedures, executed batch records, and independent second-person review before release — the documented evidence that each batch met its specification.
04
Quality control & release
Laboratory controls, method validation, out-of-specification investigation, and the disposition decision that releases or rejects product against its registered specification.
STANDARDS SPEQ DECODES · 103
Open the full library →21 CFR Part 211FDAHIGH INSPECTION RISK
Current Good Manufacturing Practice for Finished Pharmaceuticals
21 CFR Part 210FDA
Current Good Manufacturing Practice in Manufacturing, Processing, Packing, or Holding of Drugs — General
FDA Aseptic Processing GuidanceFDAHIGH INSPECTION RISK
Guidance for Industry — Sterile Drug Products Produced by Aseptic Processing
FDA Process Validation Guidance (2011)FDA
Guidance for Industry — Process Validation: General Principles and Practices
EU GMP Annex 1 (2022)EMAHIGH INSPECTION RISK
Manufacture of Sterile Medicinal Products
EU GMP Annex 15EMA
Qualification and Validation
EU GMP Annex 2EMA
Manufacture of Biological Active Substances and Medicinal Products for Human Use
ICH Q5A(R2)ICH
Viral Safety Evaluation of Biotechnology Products Derived from Cell Lines of Human or Animal Origin
ICH Q8(R2)ICH
Pharmaceutical Development
ICH Q11ICH
Development and Manufacture of Drug Substances (Chemical and Biotechnological/Biological Entities)
ICH Q12ICH
Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management
ICH Q7ICH
Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients
USP <1116>USPHIGH INSPECTION RISK
Microbiological Control and Monitoring of Aseptic Processing Environments
USP <1117>USP
Microbiological Best Laboratory Practices
USP <61>/<62>USP
Microbiological Examination of Nonsterile Products
ISO 14644-2ISO
Cleanrooms and Associated Controlled Environments — Monitoring to Provide Evidence of Cleanroom Performance
PIC/S PE 009-16PIC/S
Guide to Good Manufacturing Practice for Medicinal Products
MHLW Ordinance No. 179PMDA
Japan GMP for Drugs and Quasi-drugs
ANVISA RDC 658/2022ANVISA
Brazilian Good Manufacturing Practices for Medicines
NOM-059-SSA1-2015COFEPRIS
Mexican Good Manufacturing Practices for Medicines
ANMAT Disposición 4159/2023ANMAT
Argentine GMP Guide for Medicines
Resolución 1160 de 2016INVIMA
Colombian Good Manufacturing Practices for Medicines
DS 021-2018-SADIGEMID
Peruvian GMP Manual for Pharmaceutical Products
Norma Técnica N° 127ISP Chile
Chilean Good Manufacturing Practices
China GMP (2010 Revision)NMPA
Good Manufacturing Practice for Drugs (China)
Revised Schedule M (2023)CDSCO
India GMP — Schedule M, Drugs and Cosmetics Rules
C.R.C., c. 870, Part C, Div. 2Health CanadaHIGH INSPECTION RISK
Food and Drug Regulations — Part C, Division 2: Good Manufacturing Practices
Health Canada GUI-0001Health Canada
Good Manufacturing Practices Guide for Drug Products
TGA Manufacturing PrinciplesTGA
Australian GMP — Manufacturing Principles (PIC/S Guide)
PDA TR No. 22PDA
Process Simulation for Aseptically Filled Products
ICH Q3D(R2)ICH
Guideline for Elemental Impurities
21 CFR Part 117FDAHIGH INSPECTION RISK
Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food
21 CFR Part 111FDAHIGH INSPECTION RISK
Current Good Manufacturing Practice for Dietary Supplements
Codex CXC 1-1969Codex
General Principles of Food Hygiene
21 CFR Part 226FDA
Current Good Manufacturing Practice for Type A Medicated Articles
21 CFR Part 225FDA
Current Good Manufacturing Practice for Medicated Feeds
Regulation (EU) 2019/6EC
Veterinary Medicinal Products
ISO 22716:2007ISO
Cosmetics — Good Manufacturing Practices (GMP): Guidelines on Good Manufacturing Practices
21 CFR Part 1271FDA
Human Cells, Tissues, and Cellular and Tissue-Based Products (HCT/Ps)
21 CFR Part 606FDA
Current Good Manufacturing Practice for Blood and Blood Components
21 CFR Part 121FDA
Mitigation Strategies to Protect Food Against Intentional Adulteration
21 CFR Part 507FDA
Current Good Manufacturing Practice and Preventive Controls for Food for Animals
VICH GL3(R)VICH
Stability Testing of New Veterinary Drug Substances and Medicinal Products
21 CFR Part 700FDA
Cosmetics — General
FD&C Act §503AFDAHIGH INSPECTION RISK
Pharmacy Compounding — Conditions for Exemption
FD&C Act §503BFDAHIGH INSPECTION RISK
Outsourcing Facilities — Registration and cGMP
USP <795>USPHIGH INSPECTION RISK
Pharmaceutical Compounding — Nonsterile Preparations
USP <797>USPHIGH INSPECTION RISK
Pharmaceutical Compounding — Sterile Preparations
USP <800>USPHIGH INSPECTION RISK
Hazardous Drugs — Handling in Healthcare Settings
State Pharmacy Practice ActsState Boards of PharmacyHIGH INSPECTION RISK
State Pharmacy Practice Acts and Compounding Regulations
21 CFR Part 1301DEA
Registration of Manufacturers, Distributors and Dispensers of Controlled Substances
Ph. Eur.EDQMHIGH INSPECTION RISK
European Pharmacopoeia
CEP (EDQM Certification)EDQM
Certificate of Suitability to the Monographs of the European Pharmacopoeia
IPEC-PQG GMP Guide (v5, 2022)IPECHIGH INSPECTION RISK
Joint IPEC-PQG Good Manufacturing Practices Guide for Pharmaceutical Excipients
ICH Q13ICHHIGH INSPECTION RISK
Continuous Manufacturing of Drug Substances and Drug Products
ICH M7(R2)ICHHIGH INSPECTION RISK
Assessment and Control of DNA Reactive (Mutagenic) Impurities in Pharmaceuticals to Limit Potential Carcinogenic Risk
ICH Q14ICH
Analytical Procedure Development
ICH Q2(R2)ICHHIGH INSPECTION RISK
Validation of Analytical Procedures
EU GMP Annex 17EMAHIGH INSPECTION RISK
Real Time Release Testing and Parametric Release
EU GMP Annex 21EMAHIGH INSPECTION RISK
Importation of Medicinal Products
USP <1223>USP
Validation of Alternative Microbiological Methods
USP <665>USP
Plastic Components and Systems Used to Manufacture Pharmaceutical Drug Products
USP <1207>USP
Package Integrity Evaluation — Sterile Products
21 CFR Part 4FDAHIGH INSPECTION RISK
Regulation of Combination Products (cGMP Requirements)
ICH Q1A(R2)ICHHIGH INSPECTION RISK
Stability Testing of New Drug Substances and Products
ICH Q3C(R9)ICHHIGH INSPECTION RISK
Impurities: Guideline for Residual Solvents
ICH Q6AICHHIGH INSPECTION RISK
Specifications: Test Procedures and Acceptance Criteria for New Drug Substances and New Drug Products (Chemical Substances)
USP <1220>USP
Analytical Procedure Life Cycle
USP <232>/<233>USPHIGH INSPECTION RISK
Elemental Impurities — Limits and Procedures
WHO TRS 986, Annex 2WHOHIGH INSPECTION RISK
WHO Good Manufacturing Practices for Pharmaceutical Products: Main Principles
ICH Q6BICHHIGH INSPECTION RISK
Specifications: Test Procedures and Acceptance Criteria for Biotechnological/Biological Products
EU GMP Annex 16EMAHIGH INSPECTION RISK
Certification by a Qualified Person and Batch Release
Reg. (EU) 2017/1569ECHIGH INSPECTION RISK
Good Manufacturing Practice for Investigational Medicinal Products
AMBV (SR 812.212.1)Swissmedic
Swiss GMP — Medicinal Products Licensing Ordinance
KGMPMFDS
Korean Good Manufacturing Practice
HSA GMP (PIC/S PE 009)HSA
Singapore GMP Standard
TFDA GMP (PIC/S)TFDA
Taiwan GMP Standard
Thai FDA GMDP / GMP ClearanceThai FDA
Thai Drug Facility Licensing and Good Manufacturing and Distribution Practice
CDCR 1984 / PIC/S GMPNPRA
Malaysia GMP Standard
SFDA GMP GuidelineSFDA
Saudi Good Manufacturing Practice Guideline
Act 101 of 1965 (GMP)SAHPRA
South African GMP — Medicines and Related Substances Act
Reg. (EC) 852/2004EC
Regulation on the Hygiene of Foodstuffs
21 CFR Part 123FDA
Fish and Fishery Products (Seafood HACCP)
21 CFR Part 112FDA
Standards for the Growing, Harvesting, Packing, and Holding of Produce for Human Consumption
21 CFR Part 106FDAHIGH INSPECTION RISK
Infant Formula Requirements: Current Good Manufacturing Practice, Quality Control Procedures, and Quality Factors
USP <2750>USP
Manufacturing Practices for Dietary Supplements
21 CFR Part 558FDA
New Animal Drugs for Use in Animal Feeds
CSAR (Order No. 727)NMPA
China Cosmetic Supervision and Administration Regulation
Reg. (EU) 2024/1938EC
Regulation on Standards of Quality and Safety for Substances of Human Origin (SoHO)
21 CFR Part 610FDAHIGH INSPECTION RISK
General Biological Products Standards
21 CFR Part 630FDAHIGH INSPECTION RISK
Requirements for Blood and Blood Components Intended for Transfusion or for Further Manufacturing Use
JP XVIIIMHLW
Japanese Pharmacopoeia, 18th Edition
BP 2026MHRA
British Pharmacopoeia 2026
Ph. Int. (12th ed.)WHO
The International Pharmacopoeia
ChP 2025NMPA
Chinese Pharmacopoeia, 2025 Edition
APIC "How to do" ICH Q7 (v17)APIC
APIC "How to do" Document: Interpretation of the ICH Q7 Guide
PIC/S PE 010-4PIC/S
Guide to Good Practices for the Preparation of Medicinal Products in Healthcare Establishments
USP <825>USP
Radiopharmaceuticals — Preparation, Compounding, Dispensing, and Repackaging
IP 2026IPC
Indian Pharmacopoeia (IP 2026, 10th Edition)
21 CFR Part 201FDAHIGH INSPECTION RISK
Labeling
21 CFR Part 207FDA
Requirements for Foreign and Domestic Establishment Registration and Listing for Human Drugs, Including Drugs That Are Regulated Under a Biologics License Application, and Animal Drugs
21 CFR Part 807FDA
Establishment Registration and Device Listing for Manufacturers and Initial Importers of Devices
EMA/CHMP/CVMP/SWP/169430/2012EMAHIGH INSPECTION RISK
Guideline on Setting Health Based Exposure Limits for Use in Risk Identification in the Manufacture of Different Medicinal Products in Shared Facilities
WHAT INSPECTORS LOOK AT
- ›Data integrity in LIMS and electronic batch records (ALCOA+, audit trails)
- ›Out-of-specification investigations — thorough root cause, not just closure
- ›Aseptic process simulations / media fills and environmental monitoring trends
- ›Deviation and CAPA trending — pattern recognition, not one-off fixes
KEY REGULATORY BODIES
FDA→EMA→ICH→USP→ISO→PIC/S→PMDA→ANVISA→COFEPRIS→ANMAT→INVIMA→DIGEMID→ISP Chile→NMPA→CDSCO→Health Canada→TGA→PDA→Codex→EC→VICH→State Boards of Pharmacy→DEA→EDQM→IPEC→WHO→Swissmedic→MFDS→HSA→TFDA→Thai FDA→NPRA→SFDA→SAHPRA→MHLW→MHRA→APIC→IPC→
Derived from the 103 standards SPEQ decodes for this discipline.
RELATED DISCIPLINES
SECTORS THAT OPERATE UNDER GMP
TOPIC EXPLAINERS ACROSS THIS DISCIPLINE
155 totalData Integrity & ALCOA+ →
ALCOA+, the data lifecycle, and why integrity is the foundation every GxP claim rests on.
Contamination Control & Annex 1 →
The Contamination Control Strategy, cleanroom classification, and the 2022 Annex 1 revision.
Process Validation Lifecycle →
The three-stage lifecycle — design, qualification, continued verification — and the science behind it.
Quality Risk Management (ICH Q9) →
ICH Q9(R1), the risk-management process, common tools, and the pitfalls the R1 revision targets.
Quality by Design & Pharmaceutical Development →
Building quality in, not testing it in — the QTPP, CQAs and CPPs, the design space, and the control strategy.
Cleaning Validation →
Documented proof that cleaning removes residues below health-based limits — HBEL/PDE, MACO, and the shift from arbitrary limits.
Technology Transfer →
Moving a validated process between sites without losing control — the sending/receiving-unit model, knowledge transfer, and comparability.
Media Fill & Aseptic Process Simulation →
How aseptic process simulation validates that a sterile process keeps product sterile — design, acceptance criteria, and the interventions that decide the result.
Master Batch Record (MBR) & Batch Production Records →
The approved manufacturing template and the contemporaneous execution record — 21 CFR 211.186/211.188, EU GMP Chapter 4, and the move to electronic batch records.
HACCP & Preventive Controls →
The seven principles of Hazard Analysis and Critical Control Points, the Codex framework, ISO 22000, and how FSMA preventive controls extend it.
RABS & Isolators — Aseptic Barrier Systems →
How restricted access barrier systems and isolators separate operators from the sterile core — open vs closed RABS, isolators, and what EU GMP Annex 1 now expects.
Bioburden & Microbial Control →
The viable microbial load a product carries before sterilisation — what it drives, how it is tested (USP <61>/<62>, <1116>), and why limits and trends matter.
Commissioning & Qualification (C&Q) →
The risk- and science-based approach to proving a facility, utility, or piece of equipment is fit for GMP use — and how ASTM E2500 replaced "qualify everything" with "verify what matters to the patient".
CAPA: Corrective & Preventive Action →
The three words the industry uses interchangeably and shouldn’t — correction, corrective action, preventive action — and why most "CAPAs" are none of the last two.
Change Control →
The process that evaluates and approves a change to a validated state before it is made — and why "before, not after" is the entire point that separates it from a deviation.
Deviation Management →
What to do when reality departs from the approved state: how a deviation is classified, investigated to a real root cause, and turned into a CAPA — and the timing that separates it from change control.
Supplier & Vendor Qualification →
Why a certificate of analysis is not qualification, how risk sets the depth from questionnaire to on-site audit, and the reason the excipient supplier and the API supplier are governed by different guides.
Product Quality Review (PQR / APR) →
The annual look back that is supposed to find the trend before it becomes a recall — why PQR and APR are the same idea under two names, and how a real one differs from a copy-paste template.
Equipment Qualification (IQ / OQ / PQ) →
What DQ, IQ, OQ, and PQ each actually prove, why USP <1058> qualifies a lab instrument differently from a mixer, and how the classical four-stage model relates to the risk-based C&Q approach.
Environmental Monitoring (EM) →
The programme that proves a cleanroom’s controlled state actually holds during production — viable and non-viable, why a single Grade A recovery is not a normal result, and the alert-vs-action-limit distinction people get wrong.
OOS & OOT Investigations →
A result outside specification is not a failing batch — it is a question. The two-phase investigation that decides whether the result or the process was wrong, and why "invalidate and retest" is the classic finding.
Stability Testing & Shelf Life →
How a shelf life is actually justified — real-time and accelerated conditions, the ICH climatic zones, and why you cannot simply average three batches to a number.
Analytical Method Lifecycle (ICH Q2/Q14) →
Validation is not a one-time gate at the end — ICH Q14 reframed a method as something developed, validated, and managed across a lifecycle, and it changed what a post-approval method change requires.
Pharmaceutical Water & WFI →
Water is the most-used ingredient in pharma and it cannot be released like an ingredient — the system is validated and monitored so the water is trusted as it is used, and why WFI is a category apart.
Extractables & Leachables (E&L) →
Extractables are what a container could release under stress; leachables are what actually migrates into the product in real life — and confusing the two is why E&L programs over- or under-test.
Container Closure Integrity (CCI) →
The sterile barrier has to hold for the whole shelf life, not just pass a test at release — why modern CCI is a deterministic, validated measurement and the 2022 Annex 1 pushed it past the dye-bath.
Nitrosamine Impurities →
The contamination saga that has run since 2018 — why nitrosamines forced a whole-industry risk assessment, where they come from, and why this is a living page tied to the intelligence feeds, not a fixed limit.
ATMPs: Cell & Gene Therapy Manufacturing →
When the batch is one patient, the process is the product, and starting material is a living donation, the classical GMP model bends — why advanced therapies needed their own rulebook.
Established Conditions (ICH Q12) →
The line between what legally binds your marketing application and what your quality system can change on its own — and why drawing it well is worth months of approval time.
PACMP: Post-Approval Change Management Protocol →
A regulatory agreement you make before a change — describe it, agree the tests and the lower reporting category up front, then execute later at speed instead of waiting on a supplement.
EU GMP Annex 11 (2025 Revision) →
The draft revision of the EU GMP computerised-systems annex — lifecycle validation, data integrity, cloud, AI, and cybersecurity as a core GMP requirement.
EU MDR & IVDR Transition Timelines →
The extended MDR (2023/607) and IVDR (2024/1860) transition deadlines by device class — and the conditions to keep legacy devices on the market.
Elemental Impurities (ICH Q3D) →
Controlling metal impurities in drug products through PDE-based risk assessment across identified elements and routes of administration.
Viral Safety (ICH Q5A) →
The three-pillar viral-safety framework for biotech products — cell-line testing, raw-material control, and validated clearance.
Annex 15: Qualification & Validation →
The EU GMP framework for qualification and validation — URS through PQ, the V-model, and its ASTM E2500 relationship.
Parametric Release →
Releasing terminally sterilized product on validated process data instead of the sterility test — when it is permitted and what it demands.
Lyophilization (Freeze-Drying) →
Sterile freeze-drying — the process, its critical parameters, and the aseptic and validation controls that govern it.
Single-Use Systems →
Disposable process equipment in biomanufacturing — extractables/leachables, integrity, and supply-chain qualification.
Rapid Microbiological Methods →
Faster alternatives to growth-based micro testing — how RMMs work, and how to validate them against the compendial method.
Continued Process Verification →
Stage 3 of process validation — ongoing monitoring, trending and statistical control that proves the process stays validated.
GDocP: Recording Defensible GxP Data →
The GDocP rules — attributable, legible, permanent records — that turn a GxP activity into defensible evidence.
Contemporaneous Recording →
The "C" in ALCOA — recording at the time of the activity — and why deferred entries are a data-integrity finding.
Correcting GxP Records →
How to change a GxP record defensibly — single-line strike-through, reason, initials, date — on paper and in electronic systems.
GEP: Engineering Behind Qualification →
The engineering foundation beneath qualification — science- and risk-based design, documentation, and the GEP/GxP boundary.
Aseptic Processing →
How sterile drug products are filled and assembled without a terminal sterilization step, and the contamination controls that make it possible.
Sterilization Methods Overview →
A comparative map of the sterilization technologies used across sterile manufacturing — moist heat, dry heat, filtration, irradiation, and gas — and how a manufacturer chooses among them.
Moist Heat Sterilization →
How saturated steam autoclave cycles are designed, qualified, and monitored to deliver a validated sterility assurance level.
Depyrogenation →
Removing or inactivating bacterial endotoxin from containers, components, and equipment surfaces before they meet a sterile product.
Bacterial Endotoxins Test →
The LAL-based assay used to detect and quantify bacterial endotoxin in parenteral products, water systems, and components.
Sterility Testing →
The compendial test used to verify the absence of viable microorganisms in a sterile product batch, and why a pass does not prove sterility assurance.
Visual Inspection & Particulates →
The 100% and statistical inspection programs that catch visible particulate matter and container defects before a sterile product is released.
Disinfectant Efficacy Qualification →
How cleanroom disinfectants are selected, rotated, and proven — against real surfaces and real organisms — to actually reduce bioburden.
Aseptic Gowning & Technique →
How personnel are qualified to enter classified aseptic environments without becoming the contamination source they are being protected from.
Cleanroom HVAC Qualification →
How the air handling systems behind ISO-classified cleanrooms are designed, commissioned, and qualified to hold their classification under real operating conditions.
Personnel & Viable Monitoring →
The gloved-finger, gown-surface, and viable air sampling program that tracks whether personnel are staying within their qualified contamination limits.
Pure Steam & Clean Utilities →
The generation, distribution, and qualification of pure steam, clean compressed gases, and other utilities that touch sterile product or product-contact surfaces.
Filter Integrity Testing →
The non-destructive tests — bubble point, diffusive flow, and pressure hold — that confirm a sterilizing-grade filter actually retained its rated bacterial challenge.
Blow-Fill-Seal →
The advanced aseptic technology that extrudes, fills, and seals a plastic container in one continuous, largely automated cycle.
Isolator Decontamination (VHP) →
How vaporized hydrogen peroxide cycles are developed and validated to decontaminate isolator and RABS interiors between aseptic campaigns.
API GMP Under ICH Q7 →
The GMP standard for active pharmaceutical ingredient manufacture, from the point a starting material becomes an API intermediate through final release.
Genotoxic and Mutagenic Impurities Under ICH M7 →
How ICH M7 classifies, assesses, and controls DNA-reactive impurities using structure-activity analysis and a Threshold of Toxicological Concern.
Residual Solvents Under ICH Q3C →
The three-class system and Permitted Daily Exposure limits ICH Q3C uses to control organic solvents left over from API synthesis and drug-product manufacture.
Dissolution Testing →
The compendial in-vitro test that measures how much drug substance releases from a dosage form over time, and why it is one of the most heavily inspected assays in pharma.
Blend and Content Uniformity →
The tests and sampling strategy used to demonstrate that active ingredient is distributed evenly through a powder blend and, ultimately, through every finished dosage unit.
Comparability Under ICH Q5E →
The ICH framework for showing that a manufacturing change to a biotechnological or biological product has not adversely affected its quality, safety, or efficacy.
Biosimilar Development →
The abbreviated, comparability-driven development pathway for a biologic shown to be highly similar to an already-licensed reference product.
Continuous Manufacturing Under ICH Q13 →
The ICH framework harmonizing scientific and regulatory expectations for continuous manufacturing of drug substances and drug products, including converting an existing batch process.
Process Analytical Technology (PAT) →
The framework for designing, analyzing, and controlling pharmaceutical manufacturing through timely, in-process measurement of critical quality and performance attributes.
Real-Time Release Testing →
Releasing a batch based on validated in-process monitoring and process data, in place of or alongside finished-product laboratory testing.
Excipient GMP →
Why pharmaceutical excipients — the “inactive” majority of most formulations — are governed by an industry-consensus GMP guide rather than a single binding global regulation.
Bioequivalence and Bioavailability →
The pharmacokinetic comparison used to demonstrate that a test drug product performs the same in the body as a reference product — the scientific foundation of most generic drug approvals.
Analytical Method Transfer →
The documented process of demonstrating a receiving laboratory can execute an already-validated analytical method with equivalent performance to the originating laboratory.
Reference Standards and Reagents →
The characterized materials every identity, purity, and potency result is measured against — and why their qualification and lifecycle management are as GMP-critical as the test method itself.
Impurity Qualification (ICH Q3A/Q3B) →
The dose-scaled threshold structure ICH Q3A and Q3B use to decide which organic impurities merely need reporting, which need structural identification, and which need a safety justification.
Qualified Person Batch Release →
The EU regulatory checkpoint that certifies each batch of medicinal product before it reaches the market.
Management Review →
The periodic, top-management review of quality-system performance that closes the loop from operational data to resourcing and strategy.
Internal Audit and Self-Inspection →
The organisation’s own systematic check on whether it is actually complying with GMP and its own procedures.
GxP Training and Competency →
The documented process that establishes and maintains that personnel are qualified, by education and training, for the GxP tasks they perform.
Quality Metrics Program →
The set of trended indicators an organisation tracks to know whether its quality system is actually working, before a regulator has to tell it otherwise.
GAMP 5 Software Categories →
The risk-based classification scheme, from GAMP 5, that determines how much validation effort a given piece of GxP software actually needs.
Computer Software Assurance (CSA) →
FDA’s 2022 guidance shifting device production and quality-system software assurance from documentation-heavy CSV toward critical-thinking, risk-based testing.
Human Factors and Usability Engineering (IEC 62366-1) →
The engineering discipline, and the standard behind it, for designing medical devices so that intended users can operate them safely and effectively.
Medical Device Cybersecurity →
The engineering and regulatory discipline for securing connected medical devices against cyber threats across their design, submission, and post-market lifecycle.
Design Verification vs. Design Validation →
The two distinct, commonly confused design-control activities that confirm a device was built right, and that the right device was built.
Post-Market Surveillance for Medical Devices →
The proactive, systematic collection and analysis of real-world device performance data that a manufacturer runs for as long as the device is on the market.
MDR Vigilance Reporting →
The threshold-triggered obligation to report device-related serious incidents and field safety corrective actions to regulators within defined timelines.
Supplier Audit Program →
The structured, risk-based program of on-site and remote audits an organisation runs to verify that its critical suppliers actually meet the quality expectations they were qualified against.
Knowledge Management (ICH Q10) →
The systematic approach to acquiring, analysing, storing, and disseminating product and process knowledge across the entire product lifecycle.
OT & ICS Security in Regulated Manufacturing →
Securing the PLCs, DCS, SCADA and historians that run regulated production — where availability outranks confidentiality and a patch is a change.
Software Supply-Chain Security & SBOM →
Third-party components, software bills of materials, vulnerability intake, and supplier assurance for the software a regulated organisation did not write.
Identity & Access Management in GxP Systems →
Unique identity, authority checks, segregation of duties, privileged access and periodic review — the controls that make a GxP record attributable.
Cyber Incident Response for Regulated Records →
What happens to GxP records, batch disposition and reporting clocks when a security incident lands — and why containment is only half the response.
Regulatory Classification & Pathway Strategy →
What the product legally is in each market, which authorisation route follows, and why the rationale has to be written down.
Health-Authority Engagement →
Meetings, scientific advice, questions and responses — and why every undertaking given becomes a commitment the organisation is held to.
Establishment Registration & Licensing →
The permissions the business actually runs on — registrations, manufacturing and wholesale licences, importer roles — and why they lapse quietly.
Labelling, Artwork & Promotional Compliance →
Approved labelling and its translations, artwork under change control, and the boundary between an authorised claim and promotion.
Regulatory Policy & Standards Engagement →
Engaging with regulation while it is still being written — consultations, standards development, harmonisation — and routing what you learn back inside.
Cybersecurity Governance in Regulated Organisations →
Who owns cyber risk, what residual risk the business has actually accepted, and how an ISMS meets a pharmaceutical quality system.
Asset Inventory & Attack Surface →
Every other control depends on knowing what exists — and in regulated manufacturing the forgotten assets are the ones connected to production.
Network, Cloud & Endpoint Security for GxP Systems →
Segmentation as the control that stops an ordinary compromise becoming a production outage — plus cloud responsibility and endpoints that cannot be touched.
Third-Party Cyber Risk in Regulated Supply →
Suppliers hold credentials into the estate and copies of regulated data — and concentration is the risk that appears on nobody’s register.
Vulnerability & Patch Management Under Change Control →
Most compromises exploit something known and unpatched — and in validated environments the window between disclosure and remediation is structurally wider.
Business Continuity & Recovery →
Ransomware made recovery the primary control — and in regulated manufacturing a system that is running again is not yet back in a validated state.
Security Awareness & Human Factors in GxP →
People are the most-attacked control and the fastest detector — and which one dominates depends entirely on whether reporting a mistake is safe.
Automation Strategy & Architecture →
Architecture decides what can be changed independently later — which is why obsolete control systems stay in service past the point of support.
Process Instrumentation & Measurement →
Every control action and recorded value begins at an instrument — and a correctly calibrated one can still be wrongly installed.
Alarm Management & Safety Instrumented Systems →
An alarm asks a person to act; a safety instrumented function acts itself. Collapsing the two removes the independence the risk assessment assumed.
Automation Lifecycle & Support →
Control systems outlive the projects that install them and the people who configured them — support arrangements made at handover decide year eight.
Management Accountability & Decision Rights →
Regulators hold an organisation to decisions, not intentions — and "everyone assumed someone else had checked" is a decision-rights failure.
Manufacturing Strategy & Operating Model →
Campaign or dedicated, in-house or contract — each model concentrates a different risk, and the control burden follows the choice.
Operational Excellence in Regulated Manufacturing →
Most waste in regulated manufacturing is rework, investigation and delay caused by poor control — so improvement and compliance rarely trade off.
Operational Readiness, Startup & Ramp-Up →
The deviation rate during ramp-up is the highest the process will ever see — and that is the clearest information about it anyone will get.
Requirements Traceability & Critical Aspects →
Traceability converts a stack of test results into an argument — that the testing covered what mattered, which is the question actually asked.
Control System Assurance →
Where a small configuration change has a direct physical consequence — and can be made by someone whose role is not framed as regulated.
Maintaining the Validated State →
Validation is a claim about the present, maintained by work nobody sees — and most loss of validated state is cumulative and undramatic.
Candidate Selection & Intended Use →
The intended use written here propagates into classification, clinical design, labelling and the whole control strategy.
Formulation & Product Design →
Design fixes most of the risk and most of the cost before manufacturing begins — and operations carries what design left behind.
Process Characterisation & Design Space →
Process understanding is what makes validation an argument rather than a demonstration.
Supply Network Strategy & Resilience →
Qualification lead times mean an alternative source cannot be created during a disruption — you supply from the network you built.
Materials, Components & Packaging Controls →
A specification that omits an attribute the process depends on will be met by material that does not work — and the supplier will be right.
Quality & Technical Agreements →
It decides who does what when something goes wrong — written while nothing has.
Procurement & Contracting for Regulated Supply →
Procurement decisions create quality obligations that quality did not negotiate.
Shortage Prevention & Supply Continuity →
Most shortages trace to a single site or upstream supplier — which makes them foreseeable from the network map long before they occur.
Workforce Planning & Critical Skills →
Qualification takes months, so staffing gaps cannot be closed at the speed they open.
Learning, Training & Effectiveness →
Retraining a person who already knew the procedure addresses nothing — effectiveness evaluation is what separates a capability gap from a convenient CAPA.
Human Performance & Work Design →
Human error is an outcome, not a cause — treating it as a cause ends the investigation where the useful information starts.
Organisational Change & Adoption →
A change implemented but not adopted prohibits the old way without establishing the new one — and people improvise in the gap.
Cross-Functional Collaboration & Escalation →
Most regulated failures cross a functional boundary — the organisation had the information and never assembled it in one place.
Network, Capacity & Capital Strategy →
Capacity that is technically available but concentrated in one site is a supply risk no downstream quality work can offset.
Facility & Process Design →
A cross-flow designed in is a permanent procedural burden — mitigated forever by people rather than by geometry.
Construction, Installation & Field Quality →
Qualification verifies what exists, not what was drawn — and an unreliable as-built record poisons every later change.
Systems Completion & Turnover →
Turnover is the moment accountability moves — declared with open items, qualification begins on an asset nobody can fully describe.
Laboratory Network & Operating Model →
Testing scattered across laboratories with different quality systems produces results that are individually defensible and collectively inconsistent.
Sampling Plans, Specifications & Standards →
A result describes the sample — and the sample describes the batch only if the plan makes it representative.
Metrology & Calibration Management →
A calibration failure is retrospective by nature — which is why the as-found condition matters more than the as-left one.
Laboratory Capacity, Flow & Turnaround →
A laboratory running permanently at capacity has no slack for an investigation — which is exactly when it will be asked to do one.
Digital Strategy & Application Portfolio →
Regulated organisations accumulate systems faster than they retire them, and each carries a validation obligation for life.
Integration & Interoperability for GxP Data →
Errors here are silent by construction — a successful transfer looks identical to a correct one.
Platforms, Cloud & Infrastructure for GxP →
Moving to a managed platform moves the work, not the accountability.
Digital Service Management in Regulated Operations →
The validated state is maintained or lost in routine service management, not in projects.
Portfolio Strategy & Prioritisation →
A programme approved without the capacity to support it fails during scale-up, when the alternatives have expired.
Business Cases & Investment Decisions →
A business case is a set of assumptions that become commitments — and the optimistic ones are absorbed by functions that were not consulted.
Capital Planning & Project Economics →
Contingency cut at approval reappears as scope reduction during execution — and the scope cut is usually qualification and spares.
Demand, Capacity & Scenario Planning →
Forecast error becomes either shortage or write-off — and the shortage side carries patient harm.
Insurance, Liability & Risk Transfer →
Insurance is a control with conditions attached — and cover voided by a control you did not maintain transfers nothing.
EHS Governance in Regulated Sites →
A site can be fully GMP-compliant while operating an unpermitted discharge — the two systems share rooms and people and need one view.
Occupational Safety in Regulated Manufacturing →
Personal protection and product protection are the same gowning decision made for two reasons — and they can conflict.
Process Safety in Pharmaceutical Operations →
The leading indicators are ordinary — deferred maintenance, bypassed interlocks, changes assessed for product and not for hazard.
Biosafety & Biological Containment →
Containment protects people from the product; cleanroom design protects the product from people — and they impose opposite pressure regimes.
Potent Compounds & Specialised Hazards →
One toxicological assessment, two obligations — the limits driving cleaning validation and containment come from the same work.
Environmental Compliance & Permits →
A permit breach can stop production as effectively as a quality event — and pharmaceutical effluent carries specific scrutiny.
Sustainability in Regulated Operations →
Every meaningful sustainability change in a regulated plant is a GMP change — and public claims are now regulated in their own right.
Physical Security & Site Protection →
Someone in the room can defeat most logical controls — and controlled substances carry federally prescribed security, not risk-based security.
Emergency Management & Crisis Response →
An evacuation that abandons a batch mid-process creates a quality decision — far easier to make if it was anticipated.
Construction & Contractor Safety on Live Sites →
The activity that endangers a worker — a breached wall, an isolation, hot work — is the one that threatens the area beside it.
GMP: frequently asked questions
Reference answers on Good Manufacturing Practice — what it governs, what regulations define it, and what it requires.
What is Good Manufacturing Practice (GMP)?
GMP is the body of requirements governing how medicinal products are made and controlled — facilities and equipment, materials, production and packaging, quality control, and the records that prove it — so that every batch is manufactured to consistent, defined quality regardless of who is on shift. It is the baseline standard regulators inspect against.
What regulations govern GMP?
In the United States, GMP for finished pharmaceuticals is set by 21 CFR Parts 210 and 211. The European Union publishes the EU GMP Guide with its annexes (for example, Annex 1 for sterile products). The WHO and PIC/S GMP guides provide internationally harmonised requirements that many national authorities adopt.
How does GMP relate to sterile and aseptic manufacturing?
Sterile and aseptic operations are governed by GMP under a formal Contamination Control Strategy, detailed in EU GMP Annex 1. It covers environmental monitoring, gowning, media fills (aseptic process simulations), and the barrier and cleanroom design that keeps product sterile throughout production.